Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: 3uKSTzJsjTEhk2xxp2r1diGU7bvzkfVaJp6r8ZZp3wU=
Subject key identifier: AF:A3:1F:D8:92:F2:F1:20:A3:B5:81:D8:CB:5A:1D:9B:7A:D1:36:4D
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 01976EBDDB4956FF46250882901C76FF4369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 11CD
Signing time: Sat 14 Jun 2025 14:00:25 +0000
Manifest this update: Sat 14 Jun 2025 14:00:25 +0000
Manifest next update: Sun 15 Jun 2025 14:00:25 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=)
3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: kIfP3xQ9l8eUgCpgnqlGph7nFuiXK6XnFC7VGJOlruw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:db:49:56:ff:46:25:08:82:90:1c:76:ff:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jun 14 14:00:25 2025 GMT
Not After : Jun 15 14:00:25 2025 GMT
Subject: CN=afa31fd892f2f120a3b581d8cb5a1d9b7ad1364d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:a4:7d:e4:9a:47:e2:08:0a:ba:93:c7:d6:
48:77:9b:76:38:32:9a:ad:84:de:97:45:f8:d1:c9:
6d:64:34:34:77:16:af:e6:04:9e:2e:6d:84:7e:b9:
03:0c:8f:71:35:5c:b8:93:97:bc:5e:fa:39:6d:ef:
8e:dc:ea:a3:fa:a8:bb:0e:3f:47:cb:3e:c4:1a:41:
6e:36:73:60:83:87:26:3e:b3:fe:29:73:2a:35:b5:
3c:2a:86:ce:4c:68:50:29:a6:99:03:17:49:e8:f1:
7d:e3:fd:5c:3f:d8:a6:ad:cd:72:1e:1a:09:da:3f:
96:93:72:d3:07:ec:7a:ba:5d:d8:c6:ba:bc:0b:1e:
54:a5:db:0a:7d:15:28:fa:ec:f7:33:a1:28:26:61:
84:41:5d:32:fe:55:11:3f:2d:f1:9d:e1:6c:ec:a2:
4f:70:2b:01:52:cc:d4:47:76:ff:e7:14:c0:1a:50:
3d:da:97:ce:cd:76:ac:fd:59:b3:14:ed:f7:32:ff:
d1:da:90:d1:ec:e9:26:8e:de:cb:f7:05:d7:01:c8:
e8:d8:44:8e:99:74:6f:5a:d5:5f:f6:f7:50:75:9d:
21:7c:cd:0d:64:a9:15:0d:d5:d4:31:d1:e4:da:02:
ad:df:86:ba:d6:47:50:38:8a:dd:b8:04:d1:a8:f3:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:1F:D8:92:F2:F1:20:A3:B5:81:D8:CB:5A:1D:9B:7A:D1:36:4D
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:61:93:4c:da:46:66:fd:c1:7d:2b:23:e1:3d:ad:d1:8a:65:
9c:e2:51:4e:4f:35:b4:4e:4f:51:52:8e:00:0c:ba:3b:a6:ac:
a8:fb:9d:37:0b:e6:62:d8:2b:4f:b4:fe:43:57:94:64:b7:c3:
d9:ed:d3:20:9e:87:e9:6b:6e:0d:4e:89:fb:6c:f0:0a:a3:12:
2d:73:d2:57:0c:0e:0a:81:1d:4b:27:c4:6e:37:09:b4:11:11:
03:67:09:67:7b:66:f8:f7:f9:ce:22:06:17:36:b5:a8:6e:3c:
42:e6:3b:86:52:12:a5:ce:28:ae:42:e2:bf:66:20:dc:9d:69:
20:27:1d:6b:db:b4:10:2b:7c:0b:e5:a1:ac:57:8f:20:1a:00:
20:61:29:2d:98:fa:ed:cd:4e:35:c7:46:0b:6c:ad:69:c3:fd:
0e:79:e9:bc:32:05:5a:e1:43:6b:2b:fa:c4:d7:45:db:ec:47:
97:b4:9f:fa:87:15:1f:f4:eb:e1:b5:93:73:61:95:a8:11:d0:
9f:14:5e:0c:bc:cd:a3:f7:88:73:c1:2d:89:6a:9a:1f:34:ed:
58:a7:09:53:df:9b:ef:80:02:f1:7c:c6:9d:60:ef:35:aa:5c:
a0:f3:fa:bc:50:e1:71:48:1c:7b:7f:c7:7a:9c:6a:a1:07:69:
66:01:33:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:33 2025 by rpki-client